$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa File: e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa (raw, json) Hash identifier: 6LaD1vYE8uQxr5ur7dQ4lEvDmE3rJaAMjS21u4Kk6s0= Subject key identifier: 7C:C1:5C:53:87:5D:7E:66:33:40:26:48:2D:2E:E2:C2:D5:22:29:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D63AF8D6ECF3C8EC4A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.61.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d6:3a:f8:d6:ec:f3:c8:ec:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c3f997bc-8b65-4c7a-b5f9-958db2620d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:ed:3f:39:74:86:29:3a:03:58:8d:b4:81: e6:b9:26:9d:fe:2b:d1:38:ef:6d:c6:00:de:20:dd: 53:18:57:05:72:ac:f9:6f:96:04:a2:21:1e:c4:44: 34:00:ca:a6:6f:fc:9e:04:b8:2b:b6:01:29:d3:4c: 94:7a:29:e7:29:bf:8d:f8:09:16:5b:da:11:56:3a: 64:2e:38:2f:66:48:88:74:3d:d5:fb:a5:7a:a1:42: 33:93:9f:85:42:2b:74:d5:a9:5e:0c:43:96:f7:1d: dc:eb:c5:05:d3:78:ee:68:c0:4e:d8:b7:65:6a:33: 64:8a:d3:c2:91:9a:22:d7:6a:04:0e:5e:44:8c:f2: cb:37:00:df:bf:1f:7a:96:d1:4b:59:28:77:7a:59: 0e:d6:e4:1b:db:03:88:5c:7c:6d:83:83:c6:d1:79: 83:80:e4:e9:90:7f:ae:5d:0a:b5:71:e1:dd:c3:95: 23:da:e4:34:32:e9:67:3e:91:d3:05:4b:4d:9d:4c: 4c:ae:b7:fe:9d:6c:41:50:3e:ad:9a:b9:30:58:3d: d2:3d:63:77:c9:e4:a2:f5:9d:d1:2f:f2:d9:59:22: e7:cf:28:e4:0d:7f:dc:8b:db:02:3b:a0:15:e3:76: 9f:d7:7c:c2:c1:a5:53:a9:61:a4:2c:df:98:db:2b: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C1:5C:53:87:5D:7E:66:33:40:26:48:2D:2E:E2:C2:D5:22:29:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e28ca5a2-6b79-389e-b129-6a5d3e9c3f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9a:0e:b2:a9:66:37:59:3c:6d:b7:0e:89:1c:42:43:d1:bc: 6c:27:7c:8f:09:bd:8e:4b:f9:22:b6:ab:a5:73:0b:68:c4:57: fd:63:01:01:c8:63:8e:3e:8a:f3:82:b0:6e:2c:f4:5f:87:de: aa:a3:79:1a:f4:a6:5b:81:68:22:b3:78:64:56:27:43:a6:47: 6f:7b:73:34:77:92:8f:0f:ed:b6:3a:94:1e:74:1d:21:11:cf: 43:2b:09:3c:a1:98:4d:5f:7d:f1:fb:4b:52:d1:39:1b:53:ba: a9:30:c2:12:6d:2a:b2:07:34:2f:71:87:62:73:51:ca:d1:f4: c2:bb:b2:df:3b:b7:bf:cc:8a:90:27:d2:3e:0a:df:c4:eb:49: 00:5d:f3:0f:51:34:b7:b3:f4:5f:2a:f3:b5:5c:47:c4:2a:a8: 84:0c:77:1c:c6:80:33:32:e9:1b:9e:e9:ee:eb:23:fa:56:01: a0:a1:17:c5:b1:c1:53:a9:fd:c0:07:69:86:03:04:17:70:1a: bb:d0:48:51:a8:6c:86:b6:04:cc:65:a9:91:0b:80:6d:f4:60: f0:e4:05:19:e8:2d:2c:68:ea:15:fa:38:84:4b:e5:23:58:17: 36:16:85:c2:14:5d:8c:15:aa:a4:29:22:75:cc:e1:1a:5d:c2: ad:e5:97:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNY6+Nbs88jsSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzNmOTk3YmMtOGI2NS00YzdhLWI1ZjktOTU4ZGIyNjIwZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0HtPzl0hik6A1iNtIHmuSad/ivROO9txgDe IN1TGFcFcqz5b5YEoiEexEQ0AMqmb/yeBLgrtgEp00yUeinnKb+N+AkWW9oRVjpk LjgvZkiIdD3V+6V6oUIzk5+FQit01aleDEOW9x3c68UF03juaMBO2LdlajNkitPC kZoi12oEDl5EjPLLNwDfvx96ltFLWSh3elkO1uQb2wOIXHxtg4PG0XmDgOTpkH+u XQq1ceHdw5Uj2uQ0MulnPpHTBUtNnUxMrrf+nWxBUD6tmrkwWD3SPWN3yeSi9Z3R L/LZWSLnzyjkDX/ci9sCO6AV43af13zCwaVTqWGkLN+Y2ysG8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzBXFOHXX5mM0AmSC0u4sLVIikEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTI4Y2E1YTItNmI3OS0z ODllLWIxMjktNmE1ZDNlOWMzZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD0eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmaDrKpZjdZPG23DokcQkPRvGwnfI8JvY5L+SK2q6VzC2jEV/1jAQHI Y44+ivOCsG4s9F+H3qqjeRr0pluBaCKzeGRWJ0OmR297czR3ko8P7bY6lB50HSER z0MrCTyhmE1fffH7S1LRORtTuqkwwhJtKrIHNC9xh2JzUcrR9MK7st87t7/MipAn 0j4K38TrSQBd8w9RNLez9F8q87VcR8QqqIQMdxzGgDMy6Rue6e7rI/pWAaChF8Wx wVOp/cAHaYYDBBdwGrvQSFGobIa2BMxlqZELgG30YPDkBRnoLSxo6hX6OIRL5SNY FzYWhcIUXYwVqqQpInXM4Rpdwq3ll4Y= -----END CERTIFICATE-----Generated at Tue Oct 21 19:25:07 2025 by rpki-client